Static task
static1
Behavioral task
behavioral1
Sample
1a9bfc6a675e53b2e1fdd150f10aa3d1546b9c63540d0a2dc52113cb434088b9N.exe
Resource
win7-20240903-en
General
-
Target
1a9bfc6a675e53b2e1fdd150f10aa3d1546b9c63540d0a2dc52113cb434088b9N.exe
-
Size
181KB
-
MD5
c6a93c5b7fe7915de3b31f133c370ce0
-
SHA1
984e837a21a137bf6cb74692dcab458ca7507fa4
-
SHA256
1a9bfc6a675e53b2e1fdd150f10aa3d1546b9c63540d0a2dc52113cb434088b9
-
SHA512
ccc4732f3eb02c8bd447f0772958e68d43eec18dcf325e6f9139f2d37a0855ba8794afcb9ccf8a1cc937b8578f7ce07a01415a63d1bb25de5d513525f54b260c
-
SSDEEP
3072:fMyMzQw6ScvdO6gJKYpzKM/zB0E9IGOvNcbTt+vZu9MA4L9oMz:fM+SMgJppnzKIbTt+s9MAI9oA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a9bfc6a675e53b2e1fdd150f10aa3d1546b9c63540d0a2dc52113cb434088b9N.exe
Files
-
1a9bfc6a675e53b2e1fdd150f10aa3d1546b9c63540d0a2dc52113cb434088b9N.exe.exe windows:4 windows x86 arch:x86
f9f8ab686b2cf719ddff9c4c7bda0d40
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GlobalGetAtomNameA
GetVersionExW
GetVersionExA
lstrlenW
GetProcAddress
GetPrivateProfileIntW
Sleep
LoadLibraryW
FindFirstFileW
FreeLibrary
FindClose
GetModuleFileNameW
WritePrivateProfileStringW
GetTickCount
LoadLibraryA
EnumResourceTypesA
InitializeCriticalSection
LockResource
DeleteCriticalSection
GetPrivateProfileStringW
GetDllDirectoryW
MultiByteToWideChar
GlobalSize
MulDiv
LoadResource
GetLocaleInfoW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
shell32
DllGetVersion
ShellExecuteExW
ShellExecuteExA
SHGetPathFromIDListA
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
SHFileOperationW
SHBrowseForFolderA
SHGetFileInfoA
Shell_NotifyIconA
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ